Privacy
Till Morning runs its checks on your computer. It doesn't send the pages you visit, your baskets or your browsing anywhere. There are no ads, no analytics and no tracking.
Last updated 26 October 2026
What it reads
- Shop pages, to spot a checkout. On the 30 big shops listed in the extension (and on every shop, if you turn on "Check every shop's checkout"), it looks at each page's text on your computer to see whether it's a checkout or an order confirmation. Other pages are read and forgotten.
- At checkout: the basket total, the number of items and the pay-later provider, if there is one.
- "Take one out to fit": when a basket on one of the 30 big shops is over your budget, the name, price and quantity of each thing in it, to find the one thing to take out. It's read from the page, used there and then, and not kept.
- On a thank-you page: the order total and the order number, to count the order once.
- For the shop check: the shop's home page, one product page, the page you're on and up to 5 of its policy pages (contact, returns, delivery, terms). It reads them the way a scam checker would: company details, prices, contact addresses, delivery times, stock wording.
- "Is this legit?": only the tab you press it on, and only when you press it.
- Your microphone, only on the note page: when you press record for "A note from calm you", Chrome asks first, and it records for up to 20 seconds. It never listens anywhere else.
What it keeps, on this computer only
| Counted orders | Shop, total, number of items, date, pay-later provider and instalment dates. The order number is kept only as a short code that can't be turned back into the number. |
|---|---|
| Waiting room | Parked baskets: the shop, the checkout link, the total, the number of items, when it's ready and why it waits that long. |
| Checkout totals | The last 50 totals read at checkout, for up to 7 days, so a thank-you page without a total can still be counted. |
| Over-budget checks | Shop, total, how far over, and whether you parked it, went back, took one out or went ahead. In a no-buy month: shop, total, and whether you saved it for later or said it was essential. |
| A note from calm you | If you record one: up to 20 seconds of your voice, and the words you picked to go with it. Delete it on the note page any time. |
| Settings | Your pay, budget, payday, night lock, a no-buy month (its dates and the kinds of shop you paused), and shops you said you trust. |
| Shop check | Registry answers (a domain's registration date and registrar) for 30 days, and countdown timers seen on shop pages for 6 hours, to spot timers that start again. |
| Your plan | When your free week started, a random ID that isn't linked to your name or email, and what the payment service last said about your plan (which plan, when it renews or ends, and its manage link). |
All of it is in Chrome's storage for this extension. Nobody else can see it, including us.
What leaves your computer
1. Requests to the shop you're on
The shop check opens up to 7 pages of the shop you're on, in the background, without your cookies or login. To read them as they look on screen, it also uses the style sheets those pages name, which your browser has usually loaded already. It never runs their scripts or loads their pictures or fonts. These requests only go to that shop and wherever it keeps its style sheets, and the shop sees them as visits from your computer.
2. The shop's web address, to the domain registry
To find out how old a site is, Till Morning sends its domain name (for example example-shop.co.uk) to the registry for that ending, which it finds from IANA's public list (data.iana.org, fetched about once a month, with no shop name in the request). Only the domain is sent: never the page, the basket, or where else you've been. It's skipped for the 100,000 most-visited sites, and each answer is kept for 30 days so the same shop isn't looked up again.
3. Your plan, once payments are switched on
Payments are handled by RevenueCat (api.revenuecat.com), with cards taken by Stripe. To know whether you've paid, Till Morning sends RevenueCat your random ID, about once a day (and every minute for half an hour after you choose a plan). When you choose a plan, you pay on RevenueCat's own page: it handles your card and email, and Till Morning never sees your card details.
Nothing else. No page contents, baskets, order details, your note or browsing history are ever sent, sold or shared.
Why it asks for each permission
| Read and change data on 30 shops | To show the checkout card and count orders on those shops. |
|---|---|
| All websites (optional) | Only if you turn on "Check every shop's checkout": the shop check has to read shops it doesn't know. You can turn it off in the toolbar pop-up. |
| Active tab, scripting | For "Is this legit?" to read the tab you press it on. |
| Microphone (asked when you record) | Only for "A note from calm you", on the note page, when you press record. |
| Storage | To keep the things listed above on your computer. |
| Alarms, notifications | To bring a parked basket back when it's ready, and for the free-week and renewal reminders. |
| api.revenuecat.com | Only once payments are on: to ask whether your random ID has a plan. |
Deleting it
Removing Till Morning from Chrome deletes everything it kept. To start fresh without removing it, delete everything here: counted orders, the waiting room, your note, settings and caches. Your free-week dates and plan stay, so payments keep working.
Questions
Use the support tab on Till Morning's Chrome Web Store page.